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Abstract 


The  Air  Force  (AF),  Force  Development  (FD)  construct  is  currently  too  limited  in  scope 
and  implementation  to  effectively  tackle  cyberspace  FD  issues.  The  perceived  gap  between 
establishing  a  solid  cyber  culture  and  its  professionals  negatively  affects  the  overall  ability  to 
integrate  effects  at  the  strategic  and  operational  levels.  A  broader  FD  approach  must  exist  to 
synchronize  its  institutional  culture  in  concert  with  development  of  its  professionals.  The  greater 
result  will  yield  an  environment  that  is  cohesive  and  complementary  to  utilize  and  prioritize 
limited  cyberspace  resources  and  capabilities. 

The  disparity  of  a  unified  culture  and  development  of  its  professionals  is  manifested  by 
fundamental  cyberspace  identity  issues,  namely:  understanding  the  general  nature  of  cyberspace 
(basic  purpose,  concepts  and  mission  elements);  understanding  the  notional  force  development 
strategy  to  professionalize  a  cyber  field  and  most  importantly  understanding  how  to  integrate 
cyberspace  in  joint  operational  planning. 

Ongoing  discussions  regarding  task-organization,  force  structure  and  roles  of  the  24* 
Cyberspace  Numbered  Air  Force  (NAF)  could  make  some  information  in  this  paper  quickly 
obsolete  as  its  future  is  still  being  written.  A  significant  amount  of  source  references  derive  from 
draft  AF  cyberspace  doctrine,  AF  Cyber  roadmap  and  various  SAF/XC  functional  way  ahead 
briefings.  This  paper  adopts  a  problem-solution  methodology  to  address  cyberspace  identity 
issues  stated  above  while  proposing  broad  FD  recommendations  to  better  link  development  of  its 
force  and  culture  to  meet  long  term  cyberspace  demands. 
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Introduction/Roadmap 

Draft,  AFDD  2-11,  Cyberspace  Operations  states:  While  not  everyone  requires  the  depth 
of  expertise  maintained  by  cyberspaee  professionals,  every  Airman  should  have  a  general 
understanding  of  the  eyberspaee  domain/  Although  the  term  eyberspaee  is  incorporated  in  Air 
Force  (AF)  doctrine,  advertisements,  slogans,  and  briefings,  it  would  appear  very  few  Airmen 
understand  what  it  is  and  more  importantly  how  it  contributes  towards  achieving  operational 
effects. 

It  was  through  this  research  and  discovery  process,  1  concluded  the  AF  view  of 
cyberspace  Force  Development  (FD)  is  currently  too  limited  in  scope  and  implementation  to 
effectively  tackle  key  cultural  identity  issues  facing  Airmen  today.  The  AF  must  broaden  its 
view  towards  a  holistic  approach  to  synchronize  the  development  efforts  of  its  professionals  and 
mature  its  culture  to  best  employ  its  effects  across  the  spectrum  of  conflict. 

This  paper  roadmap  addresses:  strategic  and  operational  planning  via  a  framing  construct; 
Communications  and  Information  (C&l)  primers  which  set  the  conditions  for  cyber 
transformation;  defining  the  general  nature  of  cyberspace;  charted  career  path  of  its  professionals 
and  provide  broad  FD  recommendations  to  yield  a  mature  and  cohesive  culture  for  long  term 
mission  sustainment.  Devoid  of  a  means  to  provide  operational  relevance,  cyberspace  will 
remain  ambiguous,  or  worse  yet,  ineffective  and  improperly  employed. 

The  moment  of  arrival  for  cyberspace  maturity  is  when  every  Airman  (eventually  all 
Joint)  can  articulate  its  mission  capabilities  and  limitations,  and  treated  on  parity  with  its  cross 
domain  counterparts  such  as  air,  space,  land,  and  sea.  Until  this  state  has  been  achieved,  the  AF 
must  lead  its  Airman  to  infuse  its  mission  capability  to  realize  its  full  potential  to  the  joint  fight. 
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The  Necessity  of  Framing 

Strategic  Framing:  Ends-Ways-Means 

As  indicated  by  its  mission  statement,  the  Air  Force  objeetive  is  to  attain  superiority  in 
air,  space  and  eyberspaee  domains.  Military  planning  is  the  eritical  link  to  employ  tactieal 
capabilities  to  achieve  operational  and  strategic  objectives.  Military  planning  is  inherently 
interlaced  with  complexity  and  confusion  across  all  levels  of  warfare.  One  has  less  eontrol  over 
environmental  complexities  but  can  reduce  confusion  by  applying  a  logical  framing  approach.  In 
his  book.  Campaign  Planning:  Tools  of  the  Trade,  Dr.  Jack  Kem  poses  three  questions:  what  is 
the  problem?;  what  is  the  solution?;  and  does  the  solution  solve  the  problem?  Despite  its 
simplieity,  there  is  immense  value  as  they  frame  a  eontext  to  visualize  the  linkage  and 
relationships  in  a  strategy  to  objective  analysis. 

Framing  provides  a  reference  point  to  focus  thereby  analyzing  its  individual  and  related 
components.  As  with  all  types  of  warfare,  eyberspaee  fits  within  a  strategic  ends-ways-means 
construct.  The  ends  involve  understanding  the  strategie  end  state  of  what  you  wish  to  achieve. 
Strategie  guidance  is  generally  broad  in  nature  yet  communieates  specified  objectives  (goals) 
that  must  be  attained  to  achieve  the  desired  end  state.  The  means  imply  the  given  resources  and 
capabilities  one  has  to  expend  towards  its  intended  objectives.  Cyber  resources  consist  of 
physical  elements  of  a  man-made  domain  sueh  as:  infrastructure,  architeeture,  eleetronics  and 
human  capital.  The  ways  indieate  an  employment  methodology  of  limited  resourees  within 
given  constraints  of  space  and  time.  Cyberspaee  methodologies  include  offensive  and  defensive 
warfare  competencies  to  achieve  cyber  superiority.  The  most  popular  form  of  eyber  warfare  is 
Computer  Network  Operations  (CNO)  eomprised  of  net  attack,  net  defense  and  net  exploitation 
that  may  aehieve  direct  and  indirect  effects  in  cyber  and  cross  domains  such  as  air,  land,  space 
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and  sea.  Every  viable  strategy  must  be  founded  on  sound  planning  and  a  means  of  eontinuous 
assessment  to  indieate  progress  towards  a  Measurement  of  Effeetiveness  (MOE);  potential 
Decision  Points  (DP);  and  if  a  strategy  to  task  alignment  was  based  on  faulty  assumptions. 

The  ends-ways-means  construct  provides  an  overall  strategic  campaign  view,  the  Joint 
Operational  Planning  Process  (JOPP)  provides  cyber  planners  an  operational  framework  to 
conduct  a  coherent  and  logical  decision  analysis  of  Course  of  Action  (COA)  recommendations. 
Timeless  planning  constants  must  have  flexibility;  must  be  shared  (collaboration)  and  must  have 
understood  logical  relationships  and  linkages.  Ill-defined  plans  without  proper  vetting  are 
destined  for  failure.  The  very  essence  of  military  planning  is  to  provide  clarity,  scope  of 
purpose,  logic  in  strategy  and  minimal  risk  during  employment. 

Operational  Framing:  Joint  Operational  Planning  Process  (JOPP) 

The  Joint  Eorces  Air  Component  Commander  (JEACC)  is  the  senior  AE  representative  to 
the  Joint  Eorce  Commander  (JEC)  charged  with  integration  and  employment  of  air,  space  and 
cyberspace  capabilities  in  theater  operations.  The  JEACC  will  typically  have  an  inadequate 
knowledge  of  cyberspace  and  therefore  rely  on  embedded  cyber  liaisons  within  the  Joint/ Air 
Operations  Center  (JAOC/AOC)  to  represent  cyberspace  capabilities,  effects  and  limitations. 

Strategic  framing  spans  the  entire  campaign  architecture  through  a  cognitive  map 
incorporating  Operational  Design  (OD)  and  Operational  Art  (OA)  planning  elements.  The  JOPP 
is  an  operational-level  problem  framing  concept  referenced  in  Joint  Publication  (JP)  5-0,  Joint 
Operational  Planning,  which  allow  planners  to  frame  the  problem,  present  options  in  the  form  of 
Courses  of  Action  (COAs),  and  provide  a  systematic  approach  to  flesh  out  and  document  its 
proposed  Concept  of  Operations  (CONOPs).  Once  approved,  the  CONOP  will  be  published  as 
an  Operational  Plan/Order  (OPORD/OPLAN).^  The  JOPP  accomplishes  the  fundamental  task  of 
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providing  clarity  on  presented  COA  options  as  well  as  the  decision  analysis  used  to  support 
CO  As.  The  JOPP  proeess  validates  task  analysis  and  instills  eonfidenee  that  the  proposed 
options  offer  the  highest  probability  of  sueeess  with  the  least  amount  of  risk  within  the  given 
eonstraints. 

There  are  seven  prineipal  steps  which  make  up  the  JOPP  proeess.  The  first  two  steps 
Initiation  and  Mission  Analysis  (MA)  utilize  OD  elements  to  eentralize  efforts  in  framing  Dr. 
Kern’s  question:  what  is  the  problem?  Steps  three  through  five  utilize  OA  elements  to  eentralize 
efforts  in  framing  Dr.  Kern’s  seeond  question:  what  is  the  solution?  Built  within  these  steps 
inelude  validation  measures  to  answer  his  last  question:  does  the  solution  solve  the  problem? 
Steps  six  and  seven  refleet  the  seleetion,  approval  and  publishing  of  the  CONOPs.  The 
following  is  a  look  at  the  JOPP  and  highlights  opportunities  where  eyberspaee  planners  should 
eonsider  during  operational  planning. 

Step  1.  Initiation:  Joint  planning  is  generally  initiated  at  the  strategie  level  of  war  by  the 
President,  Seeretary  of  Defense  and  CJCS  to  eonvey  strategie  guidanee  and  speeified  U.S. 
interests  or  designated  an  end  state.  Perfeet  guidanee  will  provide  elear  objectives,  purpose  and 
identify  what  eonstitutes  sueeess."^  Planners  ean  often  expeet  less  than  perfeet  guidanee  whieh 
may  require  military  leaders  to  obtain  further  elarity  with  civilian  authorities. 

J5,  Plans  and  J3,  Operations  direetorate  often  eonduet  strategie-level  translation  of 
national  guidanee  into  operational  military  objeetives.  The  end  states  are  dictated  standards  and 
eonditions  as  approved  by  the  President  or  Seeretary  of  Defense  whieh  must  be  met  prior 
towards  the  commeneement  of  joint  operations.^  Clarity  of  a  military  end  state  includes  a 
termination  eriterion  whieh  speeifies  eonditions  under  whieh  the  military  no  longer  should  serve 
as  the  primary  Instrument  of  Power  (lOP).^  The  military  may  eontinue  in  a  supportive  role  ( i.e. 
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security  and  humanitarian  assistance)  but  it  is  the  diplomatic  and  economic  lOPs  that  must  gain 
the  priority  of  effort  to  ensure  a  civil  stability  during  post-conflict  operations. 

Step  2.  Mission  Analysis  (MA):  MA  is  the  most  analytically  involved  step.  It  requires  a 
CONOPs  baseline  to  convey  situational  awareness  for  civilian  leadership,  subordinate 
commanders  and  their  staffs.  The  goal  of  MA  is  to  frame  the  problem  and  communicate  initial 
guidance  to  subordinate  commands.  Specified  activities  include:  Joint  Intelligence  Preparation 
of  the  Environment  (JIPOE);  initial  development  of  Commanders  intent;  Initial  Planning 
Guidance  (IPG);  initial  development  of  Commanders;  Critical  Information  Requirements 
(CCIRs);  and  initial  assumptions  and  limitations. 

Based  on  strategic  guidance,  cyber  planners  conduct  a  logical  task  analysis  of  its 
supported/supporting  links  and  relationships  to  produce  a  task  determination  (implied  and 
specified).  This  rigorous  process  of  task  analysis  is  to  produce  the  mission  essential  task  list 
which  serves  as  the  baseline  of  the  commanders  mission  statement  and  objectives.  During  this 
step,  cyber  planners  have  the  greatest  responsibility  and  influence  to  translate  how  cyberspace 
may  best  effect  a  commanders  intent  across  all  levels  of  warfare  to  include  operational 
limitations,  risks  and  assumptions. 

Cyber  activities  play  a  tremendous  role  in  shaping  and  enabling  operations  throughout  all 
campaign  phases  and  may  follow  through  conflict  termination.  Achieving  unified  action  through 
continuous  coordination  and  cooperation  is  the  utmost  priority  of  the  JOPP.  Partnerships  may 
reside  outside  service  level  and  include  joint,  interagency,  and  coalition  partners.  Planners  must 
remain  critically  aware  of  risks  and  implications  that  can  unintentionally  counter  other  national 
lOP  or  coalition  efforts.  Interagency  and  joint  synchronization  remains  a  complex  and  difficult 
challenge  but  a  proven  necessity  to  permit  unity  of  effort. 
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Draft,  AFDD  2-11,  Cyberspace  Operations  states  that  cyber  planners  participate  in 
tactical  and  strategic  level  planning:  At  the  tactical  level,  they  employ  cyberspace  warfare  tools 
and  weapon  systems  from  land-based  or  airborne  platforms.  They  maintain  proficiencies  in 
Tactics,  Techniques  and  Procedures  (TTP)  designed  to  create  a  range  of  effects  (e.g.,  deny, 
disrupt,  collect,  defend).  At  the  operational  and  strategic  levels,  they  are  well  versed  in  a  broad 
range  of  cyberspace  capabilities  and  joint  processes,  permitting  the  effective  integration  of 
cyberspace  assets  with  other  national  and  military  capabilities.^ 

Step  3.  COA  Development:  The  purpose  of  this  step  is  to  ensure  the  JFC  has  viable 
COA  options.  All  COA’s  must  meet  Chairman  Joint  Chief  of  Staff  (CJCS)  five  basic  validity 
criteria:  Adequacy,  is  the  COA  built  within  the  JFC  guidance?;  Feasibility,  is  the  COA  designed 
within  the  given  time,  space  and  resources?  Acceptability,  does  the  COA  balance  cost  and  risk 
associated?;  Distinguishable,  is  the  COA  a  distinct  option  from  the  other  proposals?  and 
Complete;  how  well  does  the  COA  document  and  comply  with  joint  doctrine,  format  and  intent? 

Step  4.  COA  Analysis  and  Wargaming:  Cyber  planners  conduct  preliminary  validation 
of  initial  assumptions  i.e.  non-kinetic  strikes  against  an  adversary’s  Command  and  Control  (C2) 
nodes.  Assumptions  often  prescribe  limitations  to  gauge  what  a  plan  can  or  cannot  do.  It  is  vital 
commanders  incorporate  assumptions  in  planning  estimates  and  consider  branch  or  sequel  plans 
as  an  appropriate  means  to  reduce  associated  risks  and  answer  the  “what  now”  in  case 
assumptions  are  proven  false.  Planners  may  wargame  proposed  actions  through  various 
methodologies  such  as  modeling  and  simulation  to  increase  predictability  of  success  in  attaining 
objectives.  Planners  may  devise  a  Decision  Support  Template  (DST)  which  records  ongoing 
battle  events  and  matches  them  to  a  proposed  counter  action  matrix  built  as  a  soft  “play  book”. 

o 

JP  5-0,  Joint  Operations  Planning  states  that  planners  will  identify  governing  factors  to  aid  in 
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comparing  courses  of  action.  Governing  factors  are  aspects  of  the  situation,  imposed  by  external 
faetors  or  those  the  eommander  deems  eritieal  to  mission  aeeomplishment.  Potential  governing 
faetors  inelude  speeified  elements  of  the  eommander’ s  intent  and  planning  guidanee;  wargaming 
results;  seleeted  prineiples  of  war’;  external  eonstraints  or  any  eriteria  the  eommander  desires. 

Step  5.  COA  Comparison:  In  this  step,  cyber  planners  test  methodologies  against 
governing  faetors  to  ensure  COA  options  meet  speeified  JFC  guidanee.  It  is  important  to  note 
that  the  JOPP  is  an  iterative  proeess.  The  eommander’s  estimate  and  OPORD/OPLAN  will 
remain  in  a  eontinuous  state  of  refinement  throughout  until  final  publieation.  Planners  must 
remain  adaptable  and  eonsider  broad  implieations  aeross  other  domains  and  lOPs.  An  example 
of  stove-pipe  planning  would  be  a  direeted  eyber  attaek  against  an  adversary’s  eivilian  radio  and 
television  broadcasting  stations  with  the  intent  to  neutralize  state  propaganda.  This  action  could 
unintentionally  eounter  Information  Operations  (10)  objeetives  designed  to  eneourage  eitizen 
understanding  of  eoalition  intent  or  hamper  humanitarian  efforts  to  guide  fleeing  refugees  to 
medieal  and  food  shelters. 

Step  6.  COA  Seleetion:  The  Plans  division  chief  will  present  all  fleshed  out  COAs  in  a 
deeision  brief  for  seleetion  and  approval  by  the  President  or  Seeretary  of  Defense.  It  is  the 
cumulative,  rigorous  and  continuous  analysis  of  all  steps  whieh  evokes  eonfidenee  that  the  JFC 
has  a  winning  and  attainable  strategy  with  the  least  amount  of  risk. 

Step  7.  OPLAN/OPORD:  Onee  COAs  have  been  approved  by  the  appropriate  authority,  the 
Exeeute  order  (EXORD)  is  published  for  Geographie  Combatant  Commanders  (GCC)  to  exeeute 
the  designated  CONPLAN  as  speeified  by  an  OPLAN/OPORD.  It  is  not  enough  to  view 
eyberspaee  as  a  stagnant  set  of  eapabilities.  One  must  earefully  align  and  employ  eyber 
professionals  and  eapabilities  to  produee  operational  relevanee  in  a  joint  fight.  In  order  to 
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appreciate  what  cyber  is  trying  to  build,  it  is  also  important  to  appreciate  the  historical  context 
from  which  C&I  evolved. 

C&I  Evolution  -  Cyberspace  Primers 

The  evolution  of  C2  communications  eventually  led  to  the  modern  paradigm  of  netcentric 
models  of  operation.  The  AF  netcentric  model  would  be  forced  to  adapt  or  go  extinct  by 
multiple  factors  such  as:  Operationalize  the  Network  (OPTN),  Knowledge  Centric  Operations 
(KCO),  and  Presidential  Budget  Decision  (PBD)  720. 

Operationalize  the  Network  (OPTN):  In  late  1997,  OPTN  was  an  initiative  which 
changed  the  cultural  image  of  C&I.  OPTN  de-emphasized  its  prized  networks  and  emphasized 
the  operational  capabilities  it  supported.  The  fundamental  strategy  to  re-associate  networks  as  a 
weapons  system  garnered  wide-support  from  the  operational  community.  C&I  Airmen 
articulated  operational  risk  relative  to  their  associated  mission(s).  OPTN  elevated  C&Fs  stature 
to  obtain  quality  training,  selective  management,  equipment  block  upgrades,  and  Wing 
cooperation  to  meet  the  glaring  necessities  of  requiring  a  sound  (network)  defense  in  depth 
strategy.  OPTN  successfully  wrestled  operational  control  of  base  networks  away  from  the  host 
Wing  Commander  and  solidified  its  oversight  under  the  Department  of  Defense’s,  integrated 
Global  Information  Grid  (GIG)  architecture. 

The  AF  response  to  pervasive  network  threats  such  as  network  intrusion  and  malicious 
code  (worms  or  virus’s)  resulted  in  the  centralization  of  all  base  network  management  functions 
to  MAJCOM,  Integrated-Network  Operating  Support  Centers  (INOSC).  The  INOSCs  hierarchy 
reported  to  an  AF  service  component  under  the  purview  of  U.S.  STRATCOM’s,  Joint  Task 
Force-Global  Network  Operations  (JTF-GNO).  As  part  of  the  OPTN  initiative,  the  C&I 
community  redefined  its  leadership  duty  positions  to  emulate  those  of  an  aircrew. 
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Knowledge  Centric  Operations  (KCO):  The  next  push  eame  from  the  EUCOM 
eommander,  Lt  Gen.  Tom  Hobbins  who  stated  in  the  Aug  2007,  C4ISR  Journal:  Today’s 
operator  is  drowning  in  information,  yet  starved  for  knowledge^  General  Hobbins  promoted  the 
eoneept  ealled  KCO  and  deelared:  Knowledge-eentrieity  foeuses  on  people  and  information  first 
and  hardware  seeond.  It  requires  a  level  of  operational  rigor  to  foeus  on  how  to  present  the 
information  and  develop  a  seamless  way  for  the  operator  to  make  it  diseoverable,  regardless  of 
format  or  loeation.**^  KCO  artieulated  that  IT  systems  were  to  provide  relevant  warfighting 
effects  in  terms  of  delivering  the  right  information  at  the  right  time. 

Presidential  Budget  Decision  (PBD)  720:  The  most  distinguished  event  that  expedited 
the  C&I  transformation  was  the  Presidential  Budget  Decision  (PBD)  720.  In  late  2006,  the  Air 
Force  began  implementation  of  PBD  720,  which  targeted  personnel  capital  of  the  military, 
civilian  and  defense  contractors  in  order  to  offset  needed  recapitalization  and  modernization 
priorities  at  large.  PBD  720  was  executed  through  force  shaping  means  and  it  reduced  active 
duty  AF  wide  authorization  end  strength  by  32,440  in  order  to  meet  congressionally  authorized 
levels^  ^  The  C&I  community  took  a  substantive  hit  from  this  initiative  affecting  8,179  billets 
including:  6,927  Enlisted  reductions  and  1,252  Officer  reductions.  The  reduction  forecasted  a 
dismal  and  challenging  future.  The  C&I  functional  leadership  responded  with  a  transformation 
plan  and  multiple  initiatives  to  counteract  post  PBD-720  effects.  The  transformation  of  C&I  to 
cyber  was  a  natural  evolution. 

This  paper,  has  reflected  that  cyberspace  is  not  merely  a  set  of  stagnant  capabilities  but 
offers  significant  relevance  to  the  joint  planning  process  in  achieving  operational  and  strategic 
effects.  It  qualifies  as  a  legitimate  FD  issue  when  the  scope  of  FD  does  not  adequately  look  at 
integrating  its  professionals  and  capabilities  in  the  joint  process.  Many  of  the  C&I  primers 
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evolved  as  teehnology  drove  the  need  to  transform  data  proeessing  into  relevant  information 
power.  The  following  diseusses  the  basic  nature  of  cyberspace  definition,  objectives  and  key 
elements. 

Defining  The  Nature  of  Cyberspace 

It  is  my  assertion  that  a  contributing  factor  towards  the  cultural  identity  issues  lie  in  a 
misperception.  On  several  occasions  I  observed  a  recurring  theme  echoed  by  Airmen  of  all  ranks 
that:  if  they  didn’t  grow  up  with  it,  they  don’t  understand  it.  This  theme  infers  to  the  inability  of 
self-identification  with  cyberspace  which  results  from  a  cultural  gap  or  experience  during  its 
ongoing  developments.  Some  feel  the  word  “cyberspace”  invokes  a  technological  culture  and 
language  of  its  own  and  only  understood  by  communicators.  Although  cyberspace  has  unique 
characteristics,  capabilities  and  limitations  conveyed  by  a  specific  vocabulary,  the  same  is  true 
about  any  domain  and  is  not  exclusive.  Simply  put,  cyberspace  is  a  conceptual  manmade 
domain  in  which  we  strive  to  integrate  its  various  elements  to  enhance  warfighting  effects  in  and 
across  other  cross-domains.  The  following  sections  broadly  addresses  cyberspace  domain 
elements  comprised  of:  strategic  (guidance,  objectives)  and  operational  (cyber  warfare,  cyber 
operations,  and  competencies)  to  help  frame  the  cyberspace  nature. 

Strategic  Element 

Strategic  Guidance:  Once  the  root  problem  has  been  identified,  one  can  begin  to  ask 
Dr.  Kern’s  questions  to  initiate  a  strategy  to  task  development.  Strategic  guidance  emanates 
from  national  levels  such  as  the  President,  National  Security  Council  (NSC),  Secretary  of 
Defense  (SECDEF)  and  CJCS.  Strategic  guidance  can  be  delivered  by  formal  and  informal 
means  to  articulate  national  interests. 
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Defining  Cyberspace:  The  National  Military  Strategy  of  Cyberspaee  Operations  (NMS- 
CO)  defines  eyberspaee  as:  A  domain  eharaeterized  by  the  use  of  eleetronies  and  the 

eleetromagnetie  speetrum  to  store  modify,  and  exehange  data  via  networked  systems  and 

12 

assoeiated  physieal  infrastruetures. 

On  30  Oet  2008,  Vice  Chairman,  Joint  Chief  of  Staff,  General,  James  E.  Cartwright 
published  the  official  DoD  definition  of  cyberspace  as:  The  employment  of  cyber  capabilities 
where  the  primary  purpose  is  to  achieve  military  objectives  and  effects  in  or  through  cyberspace. 
Such  operations  include  computer  network  operations  and  activities  to  operate  and  defend  the 
Global  Information  Grid  (GIG).  The  DoD  definition,  although  welcomed,  adds  complexity  by 
competing  with  the  NMS-CO  definition.  The  key  distinction  is  that  the  DoD  definition  removes 
both  electronic  and  electromagnetic  elements  and  re-centers  cyberspace  to  focus  on  netcentric 
operations  and  defense  of  the  GIG.  General  Cartwright’s  cyberspace  letter  additionally  states: 
operations  that  may  cause  effects  in  cyberspace  (e.g.  electronic  warfare,  psychological 
operations)  that  do  not  employ  cyber  capabilities  should  not  be  considered  cyberspace 
operations.'"^ 

Draft,  AFDD  2-11,  Cyberspace  Operations  is  the  primary  AF  doctrine  and  defines 
cyberspace  as:  A  global  domain  within  the  information  environment  consisting  of  the 
interdependent  network  of  information  technology  (IT)  infrastructures,  including  the  internet, 
telecommunications  networks,  computer  systems,  and  embedded  processors  and  controllers.'^ 
Although  its  definition  can  be  construed  to  align  with  the  DoD  definition,  its  implied  elements  as 
further  outlined  in  AFDD  2-11,  Cyberspace  Operations  support  the  NMS-CO  definition. 

Cyberspace  Objectives:  Objectives  are  essential  operational  goals  that  bridge  the  gap 
between  strategy  to  task.  The  2003  United  States  National  Strategy  to  Secure  Cyberspace  is  a 
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key  document  which  lists  the  following  defensive-oriented  strategic  objectives  in  nature:  prevent 
cyber  attacks  against  America’s  critical  infrastructures;  reduce  national  vulnerability  to  cyber 
attacks,  and  minimize  damage  and  recovery  time  from  cyber  attacks  that  do  occur/^ 

The  Air  Force  Cyberspace  Command  (Provisional)  incorporated  specified  objectives  of  the 
National  Military  Strategy  (NMS)  but  also  added  offensive-oriented  objectives:  deter  and 
prevent  cyberspace  attacks  against  vital  US  interests;  prevent  and  rapidly  respond  to  attacks  and 
reconstitute  cyberspace  operations;  integrate  cyberspace  power  in  the  full  range  of  global  and 
theater  effects,  and  defeat  adversaries  operating  through  cyberspace  The  identified  strategic 
objectives  set  the  operational  framework  for  which  the  services  are  to  Organize,  Train  and  Equip 
(OT&E).  A  fundamental  challenge  still  exists  in  settling  and  resolving  the  definition  which  will 
impact  standardization  of  OT&E  across  the  services. 

Operational  Element 

Cyber  Warfare:  Cyber  warfare  describes  information  and  signals  used  to  deliver  effects 
against  military  systems.  During  an  ACSC  cyberspace  lecture,  the  senior  scientist  for 
Information  Assurance  (lA),  Information  directorate,  AERL,  Dr.  Kamal  Jabbour  specified  that 
the  signal  must  have  an  influence  on  the  intended  system;  meaning  the  destruction  of  an 
adversarial  system  alone  does  not  constitute  cyber  warfare.  Dr.  Jabbour  stated  that  the 
influence  can  come  in  the  form  of  direct  or  indirect  influences.  An  example  of  a  direct  influence 
is  an  action  taken  to  directly  disrupt  or  deny  an  information  system  through  a  malicious  code 
attack,  while  an  example  of  an  indirect  influence  would  be  to  create  a  condition  by  which  the 
system  is  altered,  affecting  the  adversary’s  “trust  factor”  or  system  integrity. 
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Pyramid  Framing:  Despite  differing  definitions,  the  AF  adopted  the  NMS-CO  eoneept 
to  aeeept  eyberspaee  domain  elements  whieh  comprised  of  the  following  components: 
electromagnetic  spectrum  (signals);  electronics  and  infrastructure  (physical),  and  logical 
(network).  All  elements  are  capable  of  providing  offensive  and  defensive  effects  from  each 
respective  component.  This  concept  is  best  illustrated  in  AFDD  2-11,  Fig  1  below. 


Influence  Operations 


Electronics  &  Infrastructure 


Physical 

Structures 


Physical  Attack 


Figure  1-7.  Defense  and  Offense  for  Cyberspace  Control 


Figure  1 :  Defensive  and  Offensive  for  Cyberspace  Control 

This  figure  serves  as  an  operational  level  frame,  illustrating  offensive/defensive  domain 
elements  to  attain  and  preserve  freedom  of  action.  This  paper  will  not  cover  all  elements  in 
depth  but  illustrate  net  warfare  as  the  most  common  example  of  cyberwarfare. 

Network  Warfare:  Net  warfare  contains  three  core  capabilities:  Network  Attack 
(NetA),  Network  Defense  (Net-D)  and  Network  Warfare  Support  (NetS).  Network  Operations 
(NetOps)  describe  operations  containing  either  NetA  and  NetD  activities.  NetA  employs 
network-based  capabilities  to  destroy,  disrupt,  corrupt,  or  usurp  information  residing  in  or 
transiting  through  networks.  NetD  employs  network  based  capabilities  to  defend  friendly 
information  residing  in,  or  transiting  through  networks  against  adversary  efforts.  Finally,  NetS  is 
the  collection  and  production  of  network  related  data  for  immediate  decision  involving  Network 
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Warfare  (NW)  Ops.  NetS  is  critical  to  NetA  and  NetD  actions  in  order  to  find,  fix,  track  and 
assess  both  adversaries  and  friendly  sources  of  access,  as  well  as  vulnerabilities  for  the  purpose 
of  immediate  defense,  threat  prediction  and  recognition.^^ 

Cyber  Core  Competencies:  Cyber  missions  are  essential  towards  achieving  information 
superiority  and  seen  as  crucial  enablers,  particularly  shaping  operations  to  establish  the  needed 
superiority  in  and  across  other  domains.  The  Air  Force  Cyber  Roadmap  presents  the  following 
cyber  competencies: 

1 .  Establish  the  Cyberspace  Domain:  In  order  to  have  the  ability  to  establish  portions  of 
the  domain,  forces  must  be  expeditionary  and  independent  of  host  nation  support  to 
provide  global  reach. 

2.  Control  the  Domain:  This  demands  robust  situational  awareness  and  ability  to 
prepare  the  battlespace;  requires  strong  defensive  capabilities,  and  means  to  ensure 
positive  C2. 

3.  Leverage  the  Domain:  This  is  the  ability  to  establish  and  control  portions  of 
cyberspace  at  our  time  of  choosing  while  denying  the  same  advantage  to  the 
adversary. 

Enabling  Cyber  Competencies: 

C&I  professionals  will  provide  the  backbone  of  cyber  forces,  yet  its  success  is  mutually 
shared  across  multiple  functional  skills  who  provide  equally  supporting  competencies. 

Additional  competencies  as  identified  in  the  AF  cyber  roadmap  are:  responsive  and  coordinated 
engineering  and  acquisition;  dedicated  Cyberspace  Technical  Center  of  Excellence  (CTCoE)  in 
shaping  future  education,  training,  and  research,  and  intelligence  that  provides  complete  and 
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integrated  eommander  situational  and  battlespaee  awareness  neeessary  to  plan  and  eonduet  eyber 

2 1 

operations  in  tandem  with  air  and  spaee  operations. 

Force  Development 

The  eyber  foree  development  eonstruct  is  developed  under  the  authority  of  HAF  A3 
(Ops)/A5  (Plans).  The  foree  development  of  its  professionals  is  designed  to  fulfill  speeified 
roles  and  eompeteneies  neeessary  to  attain  national  and  strategie  eyber  objeetives  identified 
above.  Cyber  Airman  ean  expeet  to  exeeute  operations  support  aeross  a  wide  array  of  AF 
missions  spanning  air,  spaee,  and  eyberspaee  organizations.  The  very  nature  of  eyber 
operations  demands  an  inereased  teehnieal  eapability  of  its  enlisted  foree,  led  by  offieers  who 
understand  the  operation  and  ean  reeommend  best  options  to  aehieve  the  intended  effeet. 

Cyberspace  Roles:  Based  on  antieipated  realities  of  PBD  720,  C&I  leaders  developed 
an  aggressive  path  for  eyber  transformation.  A  fundamental  task  was  to  identify  eore  eyber  roles 
whieh  would  eneompass  implied  Knowledge,  Skills  and  Abilities  (KSA)  that  would  then  shape 
and  build  speeified  eyber  Air  Foree  Speeialty  Codes  (AFSCs).  The  Air  Foree  eyber  roadmap 
identifies  key  eyber  professional  roles  for  enlisted  and  offieer: 

1 .  Cyberwarfare  Operators:  Offensive  arm  whieh  exploits  vulnerabilities,  develop 
operational  TTPs  and  lead  overall  planning,  and  exeeution  in  and  through  eyberspaee. 

2.  Cyberwarfare  Speeialists:  Teehnieal  arm  of  eyber  to  establish,  provision  and  sustain 
the  blue  eyberspaee  enterprise  with  lA  measures;  under  defensive  auspiees. 

3.  Cyberwarfare  Analysts:  Members  of  the  AF  Intelligenee  Community  (IC)  who  enable 
defensive,  surveillanee,  reeonnaissanee,  aeeess,  or  offensive  operations.  Analysts 
reeognize  adversary  trends,  teehnologies,  and  TTP  in  support  of  defensive  operations. 
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4.  Cyberwarfare  Tool/Weapon  Developers;  Blended  mix  professionals  who  focus  on 
development  design  and  software-hardware  solutions.  It  will  be  their  task  to  develop  and 
employ  long  and  short  term  combatant  commander  requirements. 

Enlisted  Development 

As  briefed  by  SAF/XCT,  the  Force  Development  for  Cyber  Transformation,  Fig  2. 
demonstrates  convergence  of  17  C&I  enlisted  AFSCs  into  KSAs.  The  gray  shaded  area  on  the 
left  illustrates  the  current  C&I  career  field  skills  and  how  they  are  converted  into  the  planned 
cyber  career  fields  (right-side  column).  The  dark  shade  of  blocks  represent  the  IBO  AFSC  series 
which  focus  on  operational  aspects  of  the  enterprise  and  the  white  blocks  represents  the  IBl 
AFSC  series  which  provides  a  hardware  “centric”  set  of  skills.  The  model  establishes  the 
baseline  matrix  to  translate  and  hone  the  current  C&I  work  force  to  the  new  relevant  cyber 
KSAs.^^ 

U.S.  AIRFORCE 


Figure  2;  Enlisted  Skills  Convergence  to  KSAs 

As  a  general  note,  the  notional  enlisted  career  development  construct  has  not  changed 
from  its  current  paradigm.  The  enlisted  force  will  provide  the  technical  depth  to  execute  both  the 
cyberspace  functions  and  tactical  missions  required  for  cyberspace  dominance.  Fig  3  illustrates 


16 


AU/ACSC/OLSONML/AY09 


that  AB-SrA  will  continue  to  focus  on  obtaining  cyberspace  fundamentals  and  specifie  tactical 
level  training,  SSgt-TSgts  will  continue  to  complement  their  knowledge  with  Advanced 
fundamentals.  SNCOs  are  expeeted  to  assume  enlisted  leadership  positions  such  as 
Superintendent  duties  where  they  can  take  their  gained  experience  and  apply  an  operational 
perspeetive. 


Figure  3:  Enlisted  Cyber  Career  Progression 

Enlisted  Cyberspace  Air  Force  Specialty  Codes  (AFSCs) 

There  are  ten  designated  cyber  enlisted  AFSCs  (four  undecided)  in  three  borad  cyb. 
There  are  three  broad  cyber  mission  categories:  Cyber  operations  (IBOXX’s),  Cyber  Systems 
(IBlXX’s)  and  Cyberwarfare  Operators,  (lB4X’s)  and  NetOps,  (lB4X2’s).  Cyber  Analyst  will 
be  provided  out  of  the  IC.  Per  the  AF  Cyber  Roadmap,  the  breakout  of  projected  cyber  enlisted 
force  AFSCs  is: 

1.  IBOXl,  Knowledge  operators  possess  eontent  info  management,  retrieval,  and 
presentation  skills.  Activities  may  include:  web,  COP  and  collaboration  mgt. 
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2.  1B0X2,  Cyber  Systems  operators  foeus  on  server  ops,  data  storage  and  appropriate 
software  apps.  In  a  deployed  environment,  this  may  inelude  exehange  and  sys  admin. 

3.  1B0X3,  Cyber  Surety  operators  employ  lA  measures:  COMSEC,  COMPUSEC  and 
EMSEC.  They  are  essential  to  ensure  a  defensive  posture  of  friendly  networks. 

4.  IBIXI,  Client  Systems  Teehnieians  (CST)s  provide  elient  support  and  integrate 
approved  elient-level  voiee,  data,  and  video  deviees  to  the  base  infrastrueture. 

5.  1BX2,  Cyber  Transport  Systems  foeus  on  airborne  and  net  infrastrueture  availability. 

6.  1BX3,  RE  Transmissions  Systems  operators  foeus  on  transmission  assuranee  and 
possess  understanding  of  spaee,  radio,  satellite  systems  teehnologies  to  integrate  and 
sustain  airborne  and  terrestrial  multi-mode,  multi-band  radio  frequeney  systems. 

7.  1B1X4,  Cyber  Speetrum  Speeialists  assure  base  level,  eleetromagnetie  speetrum. 

8.  1B1X5,  C2  Radar  Systems  Ops  provide  airfield  radar  ops  mgt  and  sustainment. 

9.  1B1X6,  Airfield  Systems  Speeialists  provide  airfield  C2  and  nav.  systems  support. 

10.  1B1X7,  Cable/ Antenna  Systems  Speeialists  install  wired/wireless  infrastrueture. 

Proposed  AFSCs  (unapproved/under  eonsideration): 

1.  1B1X8,  Control  Systems  Speeialists  eonduet  industrial  monitoring  and  eontrol 
systems  of  Supervisory  Control  and  Data  Aequisition  (SCAD A);  i.e.  distribution 
systems. 

2.  1B1X9,  Mission  Systems  Maintenanee  troubleshoot/repair  airborne  C2  systems. 

3.  1B4X1,  On  Network  Warfare  operators  provide  network  attaek,  defense  and  exploit 
eapabilities  to  disrupt,  deny,  degrade,  or  destroy  adversary  information  systems. 

4.  1B4X2,  Eleetronie  Warfare  Operators  provide  eleetronie  proteet,  eleetronie  attaek, 

28 

jamming,  deeeption,  and  theater  level  speetrum  management  . 
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Officer  Development 

Ongoing  efforts  will  convert  the  standard  33S,  AF  communications  officer,  to  17D, 
AFSC  series  and  establish  the  12X  series  to  comprise  the  Airborne  Cyber  Warrior  Officers 
(ACWOs).  As  field  grade  officers,  CWOs  will  be  qualified  to  work  at  MAJCOM-level  or  as  a 
planner  in  the  Air  Operations  Center  (AOC),  with  a  leadership  follow  on  in  an  AOC  or  a  cyber 
organization  as  the  DO  or  CC.  As  with  the  enlisted  development,  there  is  no  career 
development  departure  from  the  current  33S  development  model.  Figure  4.  Cyber  Officer  Force 
Development,  illustrates  a  similar  accession  to  retirement  approach  for  officer  development  as 
we  saw  in  the  enlisted  development  plan.  The  progressive  cyber  courses  (100-400)  are  a 
specified  series  of  functional  cyber  training  to  keep  CWOs  in  tune  with  developments, 
commensurate  to  ones  anticipated  career  progression. 


Officer  Development 

0  0  nn  ^  ^ 
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Figure  4:  Cyber  Officer  Force  Development 
Airborne  Cyber  Warfare  Officer  (ACWO):  According  to  the  AF  Roadmap  for  the 
Development  of  Cyberspace  Professionals  ,  the  rated  CWO  will  be  developed  for  technical  depth 
in  their  major  weapon  system  platform  and  later  targeted  for  appropriate  non-flying,  cyber- 
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broadening  assignments  (NETOPS  units,  Network  Warfare  units,  Spaee  Warfare  units,  etc). 

AC  WO  specialty  centers  on  the  use  and  understanding  of  the  electromagnetic  spectrum  (EMS). 
ACWOs  are  assigned  to  designated  airframes  and  may  provide  electronic  countermeasures  to 
conduct  electronic  attack/defense  or  information  operations,  or  perform  as  a  Weapons  Systems 
Officer  (WSO).  The  ACWO  careerfield  comprises  of  the  following  12X  series: 

1.  12B,  Bomber  CWO  assigned  to  either  a  B-52  or  BE 

2.  12E,  Eighters  CWO  assigned  to  either  an  EA-6B  or  E15E. 

3.  12R,  Reconnaissance  CWO  assigned  to  either  an  RC  135,  EC  130  H/J.  The  RC-135 
EWO  is  responsible  for  EEINT,  SIGINT  and  MASINT  collection  and  mission  reporting. 

4.  12S,  Special  Operations  CWO  assigned  to  either  an  AC  130H/U  or  MC  130E/H. 

5.  12E,  Experimental  Test  CWOs  assigned  to  plan,  direct  and  report  on  design 
development  and  modification  of  aircraft,  aerospace  vehicles  and  flight  simulator. 

6.  12G  are  Generalist  ACWOs  qualified  in  another  airborne  CWO  AESC  and  performs 
staff  functions  for  EW  and  Cyberwarfare  programs  and  issues. 

7.  12K  are  Trainer  CWOs  qualified  in  another  airborne  CWO  AESC  and  conducts 

3 1 

training  students  in  EW  and  navigation. 

Ground,  Cyber  Warfare  Officer  (CWO) 

Additionally,  Ground,  CWO  AESC  17D  (replaced  33S)  will  be  armed  with  a  broad  range 
of  expertise.  Proficiencies  will  include:  network  systems  operations,  lA,  Computer  Network 
Defense  (CND),  electronic  protection.  Computer  Network  Exploitation  (CNE)/  Attack  (CNA); 
expeditionary  communications;  data  links  management;  spectrum  management;  knowledge 
based  operations,  including  chief  information  officer  (CIO)  duties;  systems  engineering  and 
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architecture  design;  telecommunications,  space,  command  and  control,  and  flight-line  systems 
maintenance. 

Ground  CWO  training  will  provide  junior  officers  cyberspace  fundamentals  as  2Lts. 
Depending  upon  follow  on  assignment,  they  will  receive  appropriate  specialty  training  as 
determined  by  the  assigned  unit  mission. 

All  CWOs  will  be  required  to  complete  Cyber  100  to  be  awarded  the  AFSC  training 
badge.  New  accessions  in  2012  will  receive  Initial  Qualification  Training  (IQT)  in  AFSC 
awarding  courses.  Many  C&I  individuals  transitioning  to  cyberspace  AFSCs  from  today  until 
2012  will  require  some  amount  of  retraining.  Much  of  the  retraining  takes  place  through  Formal 
Training  Units  (FTUs)  as  individuals  move  into  assignments  in  cyber  warfare  units.  FTUs 
provide  the  final  initial  training  needed  by  the  cyber  career  force  to  achieve  IQT  status.  FTU 
examples  include:  Garrison  Communications  to  prepare  officers  destined  for  fixed  base 
communications  organizations.  Network  Attack  to  prepare  individuals  destined  for  cyber  attack 
organizations,  and  Network  Defense  to  prepare  individuals  destined  for  cyber  defense 
organizations.^^ 


A  Holistic  FD  Approach  -  Mean  What  You  Say 

In  Draft,  AFDD  2-1 1  Cyberspace  Operations,  General  Norton  A  Schwartz,  CSAF 
provides  initial  guidance  to  “view  cyberspace  as  a  whole”. The  cultural  issues  specified  in  this 
paper  reflect  evidence  of  a  limited  FD  scope.  It  is  natural  to  view  force  development  within  a 
limited  scope  of  establishing  and  growing  a  dedicated  functional  careerfield.  However,  if 
cyberspace  is  to  be  embraced  as  a  separate  but  equal  domain,  then  its  FD  scope  needs  to  expand 
and  synchronize  both  its  institutional  culture  and  maturing  force  to  meet  Gen.  Schwartz’s  holistic 
intent. 
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A  way  to  illustrate  the  nature  of  this  problem  is  to  analyze  the  following  statement: 
Cyberspace  is  a  distinct  domain  requiring  superiority  and  thus  equal  to  other  distinguished 
domains  (air,  land,  space  and  sea).  If  accepted  at  face  value,  this  statement  implies  that 
cyberspace  development  and  sustainment  should  therefore  have  equal  footing  and  importance  to 
that  of  its  counterparts.  The  concept  and  reality  poses  expectation  management  concerns. 

Cultural  acceptance  of  cyberspace  FD  is  key  to  tackling  and  resolving  the  identity  issues 
head  on  and  will  increase  the  overall  potential  of  cyberspace  to  achieve  unified  actions. 
Cyberspace  must  have  mission  relevance  and  an  equal  place  at  the  head  of  the  table  in  mission 
relevance  across  Wing,  MAJCOM,  HQ  and  Defense  levels  in  order  to  attain  the  designated 
objectives  as  determined  by  strategic  policy.  This  very  strategy  is  necessary  to  employ  that 
unified  strategy  to  task  concept. 

Recommendations 

A  method  of  closing  the  gap  between  its  culture  and  professionals  is  to  apply  broader, 
force  development  measures.  Measures  to  develop  the  next  generation  cyber  warriors  and 
stimulate  cultural  growth  will  improve  overall  warfighting  effectiveness  across  all  domains. 
Broad  measures  must  not  be  limited  to  front  loading  education,  but  also  employ  continuous 
measures  spanning  an  entire  career  (accessions  to  retirement)  to  meet  long-term  requirements. 
Cyberspace  is  now  a  permanent  fixture  of  warfare  that  affects  the  entire  joint  spectrum.  The 
following  are  a  few  recommended  measures: 

1.  Resolve  the  definition  of  cyberspace:  Both  national  strategic  and  operational 
objectives  as  defined  by  multiple  agencies  have  created  a  key  issue  for  the  Service  components 
to  have  a  standard  set  of  elements  to  conduct  the  OT&E  mission.  The  impact  of  having  a 
clouded  definition  of  cyberspace  detracts  from  the  unified  efforts  needed  to  marshal  resources. 
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collaborate  and  establish  cooperative  relationships  to  be  effeetive  and  responsive  in  a  volatile 
environment. 

2.  Create  a  Cyberspace  Road  Show:  A  eyber  road  show  designed  to  edueate  and  inform 
basie  eoneepts,  FD  strategy  and  operational  relevanee  is  a  small  investment  for  a  high  antieipated 
return.  Spread-the-word  campaigns  are  intended  to  inerease  visibility  and  permanenee.  Greater 
awareness  and  permeation  of  eyberspaee  in  AF  eulture  will  faeilitate  its  stature,  evoke  greater 
greater  understanding  and  eneourage  operational  integration  as  a  result  of  building  institutional 
eoherenee  and  eonfidenee.  It  is  ideal  to  ensure  that  some  team  members  have  someone  with 
operational  planning  experienee  to  relate  how  eyberspaee  eapabilities  ht  in  planning  at  each  level 
of  warfare.  They  will  be  essential  to  artieulating  to  Wing  leadership  (via  framing)  the  taetieal  to 
strategie  chain  and  why  each  link  is  required  to  support  the  overall  effort.  Another  objeetive 
would  be  to  dispel  lingering  eultural  mispereeption(s)  plaguing  senior  leaders  and  eonvert  them 
to  knowledgeable  stewards,  conhdent  and  familiar  with  eyberspaee  eapabilities  and  effeets  as 
they  are  with  air  and  spaee. 

3.  Create  a  Cyberspaee  Inspector  General  (IG)  program.  During  an  ACSC,  AP  800 
leeture,  the  guest  leeturer  spoke  on  Cyberspaee  and  Information  Operations  (10).  A  question  he 
posed  (paraphrase)  why  C&I  determines  its  sueeess  or  failure  based  on  whether  its  serviees  are 
operational.  He  indieated  C&I  professionals  should  measure  operational  sueeess  based  on  an 
effeetiveness  eriteria  rather  than  a  platform-based  approaeh.  Cyber  planners  face  similar 
ehahenges  as  their  eounterparts  who  employ  non-kinetie  effeets  i.e.:  Information  Operations 
(10);  intelligence  and  Special  Operation  Forees  (SOF).  Quantihability  ean  not  only  be  difheult 
to  measure,  but  at  times  is  inapplieable  to  non-kinetie  effects  which  may  only  provide  qualitative 
effeets.  During  ACSC,  JP-515  lecture,  Lt.  Col.  Linschoten  best  illustrated  this  ehahenge  with  an 
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10  example  (paraphrase):  how  does  one  ensure  (with  eertainty)  that  an  enemy  who  turned  right 
at  a  T  interseetion,  turned  right  as  a  result  of  a  direeted  psyop  pamphlet  drop?  How  do  we  prove 
that  the  desired  aetion  was  made  based  on  a  faetor  we  introdueed  or  whether  it  was  resultant  of 
an  unknown  faetor?^'’  Attribution  of  eause  and  effeet  relationships  may  be  more  diffieult  to 
validate  than  an  observable  kinetie  effeets;  i.e.:  eounting  tanks,  killing  radar  sites,  and 
interdietion  of  enemy  supply  lines  (all  physieal). 

There  are  many  effeets  eyber  planners  should  eonsider  and  determine  Measures  of 
Performanee  (MOP)  and  Measures  of  Effeetiveness  (MOEs)  to  qualify  as  indieators  and  ean  be 
institutionalized  in  the  form  of  an  IG  cyber  program.  Institutionalizing  a  cyber  program  will  help 
assist  cyber  professionals  and  operational  customers  remain  focused  on  key  capabilities  and 
effects  that  cyberspace  can  achieve  or  contribute  to.  The  key  is  to  relook  at  strategic  objectives 
and  develop  associated  logical  strategy  to  tasks  and  effects  alignment  as  discussed  earlier  in 
framing.  Developing  and  linking  offensive  and  defensive  MOPs  and  MOEs  to  designated 
objectives  are  the  best  way  to  relate  mission  relevance  to  operators.  This  approach  will  relate  the 
operational  mission  risk  and  impacts  that  OPTN  did  for  C&I  in  its  earlier  years. 

4.  Program  budgeting  for  increased  personnel  and  training:  Resource  constraints  are  the 
biggest  challenge  towards  developing  world  class  professionals.  It  is  not  a  lack  of  will  as  much 
as  ensuring  those  tasked  with  the  mission  have  the  required  authority  and  resources  needed  to 
accomplish  it.  Most  people  would  agree  with  the  realist  view:  you  get  what  you  pay  for.  This 
approach  applies  in  developing  a  cyberforce.  SECAE  Wynne  stated:  We  must  aggressively 
dedicate  appropriate  resources  to  further  develop  the  intellectual  and  technical  prowess  that  is  a 
hallmark  of  today’s  Airman.  However  the  latest  DoD  memo,  dated  12  Nov  08,  Defense 
Secretary,  Gates  states:  It  is  imperative  that  the  Services  are  able  to  provide  the  required  forces 
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trained  for  Computer  Network  Operations  (CNO)...In  the  near  term  we  will  not  inerease  the 

-5  0 

Service’s  end  strength  or  the  associated  travel  funds  to  meet  this  requirement.  The  memo 
clearly  stresses  the  importance  of  CNO  by  tasking  the  Services  to  go-do  without  providing 
additional  resources  or  mention  of  future  program  commitments.  The  DoD  and  all  Service 
components  should  remain  consistent  with  their  message  and  actions  to  better  manage 
operational  expectations  and  mission  risks. 

5.  Reassess  Cyberspace  in  PME  programs  and  incorporate/expand  accordingly:  During 
my  research  evaluation,  it  would  appear  Air  University  (AU)  offers  limited  basic  cyberspace 
instruction  outside  of  Air  Command  Staff  College  (ACSC)  and  Air  War  College  (AWC). 
Furthermore,  a  review  of  curriculum  demonstrates  the  Squadron  Officer  College  (SOC)  and  Air 
and  Space  Basics  Course  (ASBC)  do  not  have  any  course  curriculum  instruction  of  cyberspace 
basic  doctrine  or  concepts.  From  an  institutional  approach,  evidence  would  suggest  wide-gaps 
exists  in  education.  Therefore,  AU  should  consider  conducting  a  cyberspace  assessment  of  all 
PMF  programs,  spanning  enlisted  and  officer,  residence  and  distance  learning  programs  in  order 
to  better  assess  where  instruction  gaps  or  deficiencies  lie  that  need  to  be  bolstered  or  established. 
If  left  unresolved,  the  institution  may  unintentionally  send  a  message  which  downplays  its  own 
mission  statement. 

Additionally,  AU  should  consider  the  level  of  effort  to  teach  senior  leaders  and 
operational  planners  with  the  art  of  cyberspace  integration.  As  previously  stated,  the  JFACC  is 
ultimately  responsible  to  advise  the  JFC  on  how  best  to  integrate  air,  space  and  cyber 
capabilities.  It  would  be  incumbent  that  AU  team  with  JFCOM  as  the  joint  trainer  determine  if 
its  leaders  and  planning  staffs  are  adequately  prepared  to  employ  cyber  in  the  joint  fight.  It  is 
unanimous  that  no  one  service  owns  or  controls  cyberspace.  Cyberspace  Tactics,  Techniques 
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and  Procedures  (TTPs),  doetrine  and  training  must  be  eonsidered  at  the  Joint  level  as  it  is  a  joint 
enabler.  Currently  there  is  no  eyberspaee  joint  doetrine  or  joint  training. 

6.  Implement  a  Cyber  Retention  strategy/program:  Lt.  Col.  Joe  Treetor,  SAF/XC,  33S 
funetional  manager^^  eonfirmed  in  a  telephone  interview  that  eurrently  there  is  no  diseussion  of 
eareer  ineentives  sueh  as  a  bonus  or  other  ineentive  to  retain  eyber  professionals."^*^  The  AF  Road 
Map  says:  Well  planned  retention  strategies  must  be  developed  to  help  retain  these  skilled 
professionals."*^ 

Having  a  laek  of  retention  program  in  a  profession  that  requires  speeialized  skillsets 
eould  present  risks  to  managing  expeetations  of  meeting  long-term  mission  goals  and  prove 
unrealistie  to  its  long  term  aeeessions  to  retirement.  Draft,  AFDD  2-11,  Cyberspace  Operations 
states:  This  evolving  era  of  eyberspaee  operations  requires  that  individuals  possess  high 
standards  of  teehnieal  eompetenee,  robust  analytieal  skills,  and  an  intimate  understanding  of 
warfare  applieation  in  eyberspaee.  To  be  sueeessful  in  an  evolving  era  of  eyberspaee,  eontinuous 
learning  is  paramount."*^  This  statement  implies  that  a  signifieant  and  eontinuous  investment  is 
required  in  terms  of  training  eost  and  time  to  develop  profieieney  aeross  an  operational 
environment.  Cyberspaee,  unlike  its  domain  eounterparts  will  evolve  at  an  unpreeedented  paee. 
Modernization,  researeh  and  development  eosts  are  neeessary  to  keep  paee  with  the  rapid 
developments  of  new  threats  and  aetors.  SAF/XC  leaders,  edueation  leaders  and  funetional 
managers  must  team  to  view  foree  development  from  a  holistie  approaeh  and  eonsider  how  its 
eurrent  retention  strategy  (or  laek  thereof),  promotion  and  eontinuous  edueation  requirements 
impaet  the  overall  long-term  mission  sueeess. 

A  viable  retention  strategy  should  also  eonsider  the  eoneept  of  ensuring  the  right  foree 
mix  of  aetive  military.  Air  Reserve  Component  (ARC),  eivilian  and  eontraetor  forees.  Cyber 
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leaders  will  need  to  elosely  eonsider  the  mission  and  its  requirements  to  determine  if  a  particular 
force  might  be  better  suited  than  another.  As  an  example,  certain  positions  and  missions  would 
not  be  well  suited  for  an  active  duty  officer,  on  a  standard  three  year  tour.  Particular  cyberskills 
require  a  significant  amount  of  investment  time  to  train  and  develop.  Cyber  leaders  and 
functional  managers  should  consider  if  contractors,  ARC  or  civilians  might  be  a  better  fit  to 
reduce  mission  impact  by  assuring  uninterrupted  longevity  and  seasoned  experts  for  various 
cyber  missions  at  home  station  while  contractors  or  civilians  may  be  limited  or  unable  to  fulfill 
operational  deployment  requirements.  Cyber  leaders,  education  institutions,  and  functional 
managers  must  collectively  assess,  and  synchronize  the  right  force  mix  to  meet  long-term  cyber 
requirements  while  ensuring  that  cyber  professionals  are  afforded  opportunities  for  assignment 
breadth  and  promotion. 

7.  Train  as  you  Fight:  We’ve  all  heard  the  concept  of  “train  as  you  fight”.  It’s  one  of  the 
very  redundant  lessons  learned  theme  from  most  every  major  operation  and  exercise.  It  holds 
true  that  we  should  have  in  place  a  system  and  mechanism  to  ensure  the  proficiency  and  quality 
of  our  cyber  experts  remains  the  highest  in  the  world.  During  a  telephone  interview  with  Lt.  Col. 
Trector,  SAF/XCT,  best  described  the  training  end-state  of  cyberspace  professionals  as 
(paraphrase):  we  somehow  need  to  get  cyberspace  operators  to  a  point  they  become  no  different 
than  pilots  who  train,  conduct  mission  planning,  go  to  the  range  to  execute  the  mission,  return  to 
base  for  an  analysis,  conduct  an  outbrief,  return  home  and  do  it  again  the  very  next  day."^^ 

Let’s  suppose  we  take  the  action  to  formalize  an  IG  cyber  program  which  identifies  and 
evaluates  Mission  Essential  Task  List  (METL)s  as  determined  by  functional  managers  and  GCCs 
who  know  first-hand,  the  relevant,  operational  KSAs  and  capabilities  needed  in  theater.  In 
theory,  the  bases  should  then  train  and  practice  to  meet  those  required  capabilities  and  integrate 


27 


AU/ACSC/OLSONML/AY09 


proficiency  checks  as  a  graded  instrument  within  the  Wing,  Operational  Readiness  Inspection 
(ORI).  It  would  be  advisable  to  incorporate  a  systematic  approach  which  employs  a  continuous 
training  mission  at  home  related  to  operational  objectives  and  then  conduct  the  evaluation  of 
cyberspace  readiness  through  institutionalized  programs  such  as  an  IG  and  Wing  ORI.  This 
systematic  approach  should  ensure  a  ready  force,  capable  of  delivering  those  relevant  METL 
capabilities  to  its  operational  customer.  It  is  only  by  these  established  means  and  thinking  that 
cyberspace  will  advance  to  attain  operational  mission  parity  at  all  levels  as  AF  doctrine 
envisioned. 


Conclusion 

This  paper  proposed  that  the  current  scope  of  AF  cyberspace  FD  is  too  limited.  As  a 
consequence  of  that  result,  this  paper  addressed  key  cultural  identity  challenges  related  to  the 
synchronizing  development  of  its  force  to  a  well  established  culture.  Those  issues  were; 
understanding  the  general  nature  of  cyberspace;  understanding  the  force  development  strategy, 
and  integrating  cyberspace  in  the  joint  operations  planning. 

To  counter  those  issues,  a  framing  construct  relayed  how  cyberspace  fit  within  a  strategic 
and  operational  level  construct.  Furthermore,  this  paper  provided  information  to  convey  its  basic 
domain  nature  (cyber  concepts  and  elements),  notional  force  development  of  cyber  Airman  and 
the  importance  of  the  JOPP  to  incorporate  cyberspace  capabilities  in  operational  planning. 

By  considering  General  Schwartz’s  “holistic”  concept  of  cyberspace  requires  a  broad 
scope  to  focus  many  components  of  its  FD  which  includes  policy  and  relationships  in  support  of 
the  ultimate  goal  of  attaining  cyber  superiority. 

Americans  can  no  longer  underestimate  the  adversary  as  we  did  in  Korea,  Vietnam,  Iraq 
and  Afghanistan.  Our  battlefield  is  now  a  virtual  plane  as  real  as  a  geographical  one.  The 
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constant  that  applies  to  both  is  that  our  confidence  cannot  rest  alone  in  our  military  might  or 
technical  superiority.  Our  enemy  is  cunning,  adaptive,  and  capable  of  countering  US  might  by 
leveraging  asymmetric  warfare  in  cyberspace  to  gain  the  advantage.  Cyber  warriors  equipped, 
educated  and  trained  to  conduct  shaping  or  enabling  operations  in  the  virtual  battlefield  are  a 
necessity  across  all  campaign  phases.  The  assurance  of  mission  success  does  not  lie  in 
technology,  but  the  commitment  to  develop  a  capable  and  prepared  cyber  force  and  a  dedicated 
culture  who  are  as  cyberminded  as  they  are  airminded. 
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